commit d29846f: Treat HTML attachments as bad

twesterhever 40121680+twesterhever at users.noreply.github.com
Fri Jun 23 19:42:03 UTC 2023


Author: twesterhever
Date: 2023-06-22 20:58:18 +0000
URL: https://github.com/rspamd/rspamd/commit/d29846fd0b110ef68ed5f3d0c961125e3a562b38

Treat HTML attachments as bad

---
 src/plugins/lua/mime_types.lua | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/src/plugins/lua/mime_types.lua b/src/plugins/lua/mime_types.lua
index 2059fc9f9..83ea0eb00 100644
--- a/src/plugins/lua/mime_types.lua
+++ b/src/plugins/lua/mime_types.lua
@@ -45,8 +45,10 @@ local settings = {
   extension_map = { -- extension -> mime_type
     html = 'text/html',
     htm = 'text/html',
-    txt = 'text/plain',
     pdf = 'application/pdf'
+    shtm = 'text/html',
+    shtml = 'text/html',
+    txt = 'text/plain',
   },
 
   bad_extensions = {
@@ -59,6 +61,11 @@ local settings = {
     jar = 2,
     lnk = 4,
     scr = 4,
+    -- In contrast to HTML MIME parts, dedicated HTML attachments are considered harmful
+    htm = 1,
+    html = 1,
+    shtm = 1,
+    shtml = 1,
     -- Have you ever seen that in legit email?
     ace = 4,
     arj = 2,


More information about the Commits mailing list